5. U information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system project by name or other personal Identifier? 

NO. [If no, skip to question ?.| 

X YES. [If yes, proceed to the next question,] 

6. Does In. syMv o protect collect am informal m recth out the pew ,v n N the 
subject of the information? 

_ _'NO [If no, proceed to question ?.] 

X YES 

a. Does the systenvproject support criminal, CT. or FCI investigations or 
assessments? 

.NO 

X YES [If yes, proceed to question 7,| 

b. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act tested statement (either on the collection form or via a 
separate notice}? 

X NO [The program will need to work with PCLSJ t« develep/implement 
the necessary form{s},| 

_, YES Identify any forms, paper nr electronic, used to request such 

information from the information subject: 

WhiE '.he 1C? public xxebsitc contains a doodled Pmae\ Pokes, IWJ' :s 
working with 1C3 to ensure that an appropriate (e)(3) notice is added to the website. 

7. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system p r o cw. Fi'.d b$Ns should o tlx >c ts> d s ,L ddfc * m h rhed ms'.anecs 

X NO _ YES If yes, check all that apply: 

_SSNs are necessary to estab 1 ish; confsnn the identity of subjects, victims. 

v, itnesses or sources in this law enforcement ot intelligence activity. 

_SSNs are necessary to identify FBI personnel in this internal administrative 

system. 
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FBI FT A; | | 

SSNs arc important for other reasons. Describe: 

The systero/prqkct provides special protection to SSNs fe.g , SSNs are 
encrypted, hidden from all users via a look-up tabic, or only available to certain 
users). Describe: 

It is not feasible for the sysicm/prqieci to provide special protection to 
SSNs. Explain: 

8. is the system operated by a contractor? 

No. 

Yes. Information systems operated by contractors lor the 1'Bi .may be. 
a m eon 5 ' ' w At ^'*er ' \ i.rs i > 1 he k \ w-u<\ . ' r -' w n ' ..'mu 1 
standard contract clauses that must be included in the event the system collects, maintains 
or disseminates PI! and additional requirements -nay be imposed as a matter of 
Department of justice policy. Consultations with the Office of the General Counsel may 
be required If a contractor is operating the system for the EBL 

9. I las the system undergone Cettilkatlon & Accreditation (C&A) by the FBI 
Security Division (SecDC 

NO If no, Indicate reason; if C'NA Is pending, provide anticipated 
eo.mpk.tion date: 


. 1 . YES 

If yes, pkm 

e indicate the follow 

fog. if known: 



Z|was rest:cue 

.Uteri on Jarmarv j g. 

4h i and has Ac. 

'horiiv to 

Operate (ATO) thro 

tab January 1 

2 2014. 



Confidentiality: 

.Low 

X Moderate 

High 

Undefined 

Integrity: 

„X_ Low 

_ Moderate 

High 

Undefined 

Availability: 

.Inns 

X Moderate 

_j-ngh 

_Undefined 

Not af 

vplicabie - this 

i sy stem is only paper 

•based. 



10. Does the system eo.ndt.tct data mining as defined in Section 804 of the 

Implementing Recommendations of the 9/11 Commission Act of 2007, P.L. I i 0- 
53 (coddled at 42 CSC dOOOecTD? 


X m NO 
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1 ^ > CCA ss i F 1 K I 

FM FI A; | 

_YES If yes, please describe the data raining functions 

11. Is this a national security system (as determined by the SecD}? 

X NO .YES 

12, Status of System/ Project: 

_ 1 his is a new system' project in deveiopment 

II, EXISTING SYSTEMS / PROJECTS 
1, When was the sy siem/proj eel d eve loped? 


2, Has the svstenv’projcct undergone any significant changes since Apri i 7. 2003' 

N < 0 • if no, proceed to rw\: quest on 1 11.311_X_ YES K >es, md-cate w rich 

of the following changes score involved (mark all changes that apply, ami 
provide brief explanation for each marked change): 

_ A conversion bom paper-based records to an electronic system, 

A change from information in a format that is anonymous or non- 
identifiable to a format that is identifiable to particular individuals. 

_A new use of an IT system.'project, including application of a new 

cel tology 1 at changes how n format on i t mennhacle form s ns t tged 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist,.} 

A change that results in information in Men till able form being 
merged, centralized, or matched with other databases. 

A new method of authenticating the use of and access to 
information in Identifiable form by members of the public, 

A systematic incorporation of databases of informat ion in 
identifiable form purchased or obtained front commercial or public sources. 

_ A new inter tgenev use or shared agency function that results if. 

new uses or exchanges of information in identifiable form, 

_X_ A change that results in a new use or disclosure of Information in 

identifiable form. 

!VA Ml: 
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Cfhangec do s'oi involve a change in - he type of records rnadrtaiocd 
she individuals oo whoso records arc roadrsaioed, or she one or 
dwsvroioadon of i mb rotation dons the wot one/pn rives 

\ s < \j< S > \ 



a. Provide date/idk- of the FIA: 

A PI A. for | ~[ .voc completed May 4, eOOP a odor she predecessor b7E 

.NO X VhN 
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*'»l HlfVACV iHKi-'SHttt S> ANAl.VStS <PTA) 
NAME m SVSiEM: Km T»<*»>s-?0« 
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UNC v AS fofo ED.VF0ESEmP*=^£S5L£ 


FBI OGC/PCLU Form Rev. 9/15/OS 

CHECKLIST FOR PRIVACY CiOMFLlANOii FOE 
FBI ROUTINE DATABASES 
{Including comparable applications) 

This du't'kh-4 N based on the HIS Fmae> Impact A me mount thi O for FBI Routine 
> m, 4 v A s * torn t ^ HO PC>< ?*- "XVr' 4*: ' A * fot Ru 

PIA» tim eheetdkf may he ws«d in Ilea of any additional PSA (or FTAL so k>«g as every one 
of the melee blocks below can he cheeked. This checklist should he completed ky the 
database manager (or other appropriate official/ ns determined by the dtv&Rm) and 
approved by the Division Privacy Officer. 

A. fo '™u\Fv\S,'\"v ... 4 0 4011 

potential Hass members t« Lmgley v< United States (Fed. €!<)> The data will consist 
of foformation derived from BPMS as well as Reformation provided hy the Traiaiag 
Division regarding New Agent Trainees (NATs) from 8/2007- 4/201 1. Including 
individuals oho did not complete training and Individuals who were reeyeied 
through N A training. The database will he used by the FBI to provide notice of the 
class action to potential elass members. as ordered by the coord as well as to 
support the litigation. 

C. '.ecu n - "O' >' o .. v .woo tKA .S m{inmcMLw l mth 

s ' s Os v s Ot 'V ... i i \f.f | j 

OGCNELC IE FA-4ItO. I | 

IE Cbcekhst (all most he cheeked as being accurate for this datahase/applleatinn};: 

.JL. 1 - Information so the system idem hies individuals, either directly or indirectly. An 
individual ears be identified mdueetlv through a combination of descriptors such as 
gc tder ce. : bm I _v 'g aphic iodic ice tst nbe r licet se p ate t ? 

X 2. The system derives information from FBI records covered hy existing Privacy Act 
system of records notices fh?.tp;/ ; foiaibi.gov/rea sys.htrn t regardless of format in which 
those records are maintained and/or Iron- information that is publicly available at no cost, 
(If Information comes trout FBI records that are not coveted by existing systems of 
records notices, contact the PC 1.1.1.) 

JL 3. Neither commercial dam nor paid subscription service data is Included in the database 
unless that information is derived trout existing FBI records. 




epic.org 


14-06-04-FBI-FOIA-20150318-4th-Production 


EPIC- 










JK„, * '■SC' v vV > K u'v v o e 

other similar FBI emiiy and sharing of information is based strictly on an operational 
need as know. 

X " V '•SCI! ion - v i M t 'S S ' V«< 0'-v.\ Ov . Oil’ > „ 

X. 6. Initial and continued across to the system is subject to permission controls enforced 

by FBI superc-sory personnel, including the use of access passwords. 

X 8 . The system is part of an established platform on w hich a Security Certification and 
Accreditations Isas been performed, 

X 9. The system was developed after April .17, 2003. " 

X 10. If the system maintains information about U.8. citizens or legal permanent residents, 
it is covered by a published Privacy Act System of Records Notice. 

X 1 ;. Records retention issues have been discussed with the Records bianasemem 
Division. 

is transported outside FBI facilities most comply with the FBI policy on encryption and 
must be password protected. 

F. If a database contains information that may be considered sensitive/coritroverstal 
or is maintained as pan of a larger FBI program, the database administrator or 
progrant manager (or division privacy officer} most consult with the FBI's Office of 
the General Counsel. Privacy and Civil Liberties Unit abm.it the potential need to 
assess the privacy risks in a separate PI A. 

G. File Notes (summarize any additional mformation that may be warranted for 

record purposes, e,g., coordination with OGCk etc.); 

The Fill has been seed by a former MA T for overtime allegedly due XATs under the 
Fair Labor Standards Act tFLSA), The FLSA has a three year foook haelw provision for 
willful violations, and a two year look back provision for a negligent violation. This class 
action requires that the FBI identify potential claimants; notify them of the pending 
litigation, track claimants who "opt hr" to the ibfoaifoa; qnaotify the amount of individual 
claims since the amounts vary among SAIN; and track disbursements of funds to class 
members. There are approximately 28(H) putative class snemhers. 


SjvWm Uovciopm Cesae Aprs! ; A AKA. mu we wixiified xsme U;sr: are net required n> cosabct n PI A. -rsitll;; 
j;xKl:lk:an<>o ewers she! would change die pmxe y risks so osipmwioe in We sssres;; 
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FBI PRIVAC Y THRESHOLD ANALYSIS (PTA) 

(Equivalent: Co die DOJ trdttp; Privacy Aoaesvixem (IEA A 

NAME OF SYSTEM / PROJECT; | | *>7E 


AIa \ H A ^ ^ ' s v 


\xNsv' " 

M>!P1 PRtTBB I Ft\ 

FBI OCT/PO J; FOE' 

| OasBdod By: 

K 3 „ k :| | 

Tame. 



1 Keossxi: 

Bfoeraru Ofbee: 


Phone: 



j BscievBiy Oe; 

Division: STAS': 

-TD 

Room Number: YSOoBH 


Da,ne:| | 




Room BomM:: 

~ A- >\ v I' 




FB^'AhK'\'\A An >nu! O AH A Ox s s V . ss N ^ ' 



x „ e \b sv v o c oo 

DIvAion Privacy Officer 


executive so Division deter: nmeO 

A 

P>"gS\0n i S'.S'SOO 

1 1 

Sign mote: | l 

Special 1 eennoiopm:; 

Dare rmncL ;.; y.- mW/- 1 

Dale ocomT M I'T/O ’ 

and Applications Section 

Na;vu::| ; | 

V v| | 

(STAS: 

I die: Ban iliueE Computer fommeermg 

I 0 0 

Title: STAS Privacy OSker 

FB.1.HQ Division; 

; x . \ e 

Signature: 


i Dale signed: 

Date onned 

\ \ 

Nome: 

! 'l ilts: 

Tide: 


ABerall division appro* «k, A roord otaed bard copy pins electronic copy o> FBI OTIC/BETT: (TFM ?3Sbe 
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I f you marked s® of she above, proceed to Qoerikm 4. 


None of the above. If none of the above, describe why die bslbrmadon does not 

consol tants? 

.NO .YES 

5. N tniontsaiton about United States citizens or lawfully admitted permanent resident 

NO. rtf no, skip to question ?,| 

YES. fit'yes, proceed to the neat tpestlonp 

subject of the information? 

NX) [If no, proceed to ignestkm ?,| 

.YES 

assessments? 

NO 

YES flf yc:$, proceed to pueslksn 7d 


b. Are subjects old n formation dons whom the tnionnatiou is directly cobee tod 
provided a written Privacy Act O:U0 statement (either on the collection Stmt or via a. 
se par ate n o t k e) ? 

v IT he program will need to work with HIS to develop/impkment 
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the mmersary fornnshj 

YES Identify any forms, paper «r electronic, «$ed to request such 
«tfd*m.nmo from tlx mf nmamm -mEmm 

? \re Soc I Sec rky \ nbem SSNs ^ ,\ ed or dmsen ed Iron 

X , v <■ < '-WSN \ 

_ NO YES If yes, cheek all that apply: 




SSNs ax: .accessory to identify FBI', personnel in this Interna! administrative 

system. 

SSNs are important for other reasons. Ik-scribc: 

', n INmoOv 

SSNs. Eaphm: 

.No. 


.Yea. Information systems operated by contractors for the FBI may be 

considered Privacy Act as sterns of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system, 
collects, maintains or disseminates Pil and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor Is operating me 
system for toe FBI. 

9. Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division {Sect))? 

.NO If no, indicate reasont s v \ is pending, provide mkieipated 

eo.mpletkm date: 

.YES If yes. please indicate the folkoving, ii'kmxvm: 
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U$€L.\m FtEI> 

Provide date of las t C&.\ eertlieatioi^¥e-eertl!katI<>s; 


CoalMeobabiy; 

_Low_ 

^Moderate _ 

Jligd. 

l adef'laed 

Integrity: 

Low 

.Moderate 

.High... 

IohFFuwP 

Availability: 

_Low 

_Moderate 

_JIifb„ 



Not applicable - this system <s only p&per-teed. 
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t: Nil, a \SI FtFt $ AX>EIIE 13 ^^^ 


10. 'N^N V ,■ v ( N 4 ^ ' H Ok > 5 > ' budget',"jht'US 

.NO 

YES If yes, please provide the (late ami m*m or 
title of the OMB stebndsskrn; 

11. Dues the s\$iero conduct data mining as debited to Section 804 ot the 

evde rcrtmq Roc m$r ud.."o •*- ot the ^ 11 v dm' on Net'" 3 )d~ ' 11 jtF 

5 sa.,nhnod no 4 2 t'St. :tnn.be• 3, 

.NO 

YES If ?e$, please describe the data min log function: 

12. s ? 'o ^ < >. v'<A \-\\0' - 4K >' ^ 1 ','W v ' 

_NO _YES 

13. Status of to stem Fro]cot 

This is a next system/ protect in development, f If yon cheeked this Sleek, 
>TO he ETA k now e Mem a \ ^ \s\ v 

sohrultted to FBI OGG EC1.1' for final FBI approval and detamhnstkm If 
PI A and/or other are respired.] 


IL EXISTING SYSTEMS / PROJECTS 
F When was 'he system orelect developed? 

2. tEt\ vhv ^ssto'tv pofeet u'klo\ 0 v\xe a.p v'j.-re,3eant eNteoe - e \or. |' „ 
NO iff no. proceed to next question (11.31,1 


YES It yes indicate which of the following changes xvete involved (mark all 
changes that apply, and provide brief explanation for each marked change }: 

A conversion from paper-based records to an electronic system. 
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(OGC/PCLU (Rev. 04 01 201!) 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM / PROJECT; LICENSE PLATE READER 


rn& R FBI Unique Asset ID; 



b6 

___ b7C 

Derived From: 

Classified By: 

Reason: 

Declassify On: 

SYSTEM/PROJECT POC 

FBI OGC/PCLU POC v , L 

Name: License Plate Reader 

Program Office: Video Surveillance Unit 
Division: Operational Technology' 

Phone: 703*985-6601 

Room Number: ERF Annex, Rm G07.3 

Name 

Phone 



Room Number: | 



WVI 3*js\ 



Program Manager (or other appropriate 
executive as Division determines) 

Division 

_J 

Privacy Officer 


Program Division: 

Video Surveillance Unit 

Signature: 1 

Signature 
Date sign 
Name| 

Title: OT 


Date signed: WW/ii- 5 - 

NameL_ 1 

Title: Program Manager 

[> Privacy Officer 

FBJHQ Division: 
Operational Technology 
Division 

Signature:! 1 

Date signed: 

Narae:| | 

Tide: Unit Chief 

Signature: 

Date signed: 

Name: 

Title: 


After all division approval^ femml bard electronic cop y to FBI OGC/PCLU f JEW 735P). 

! Uk' ‘ A ;■ M i v 11 me*Tc Office - dactmouffimv s eomPffi ns no.<« fmal approval w II ho rerouted on the 

following page, s 
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liNSffc f < 1.A4S1BCA HON rOM'Wl MARKINGS, !!' AEPRDFIIIATEJ 

FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS___ 


K PIA is required by the E-Govemraent Act. 

___ PIA is to be completed as a matter of FBI/DOJ discretion, 
is PIA to be published on FB1.GOV (after any RMD FOiA redactions)? _Yes. 


_ No (indkah 


_ PIA is not required for the following reason(s): 

___ System does not collect, maintain, or disseminate PIL 

_ System is grandfathered (in existence before 4/17/2003: no later changes posing significant privacy risks). 

_Information in the system relates to internal government operations. 

_System has been previously assessed under an evaluation similar to a PIA. 

_No significant privacy issues (or privacy issues are unchanged). 

_Other (describe.): 


Applicable SORN(s): 


U3E iMZ _ 




mO. fUL & t 

Notify FBI RMD/RIDS per MIOG 190.2.37_No_Yes-See sample EC on PCLU intranet website here: 

http://home/DO/OGC/I.TB/PCLU/Privac>Civil%20Libertie$%20tibrary/formJbr_miogl90-2-3_ee.wpd 


SQRN/SORN revision(s) required? _No 


_Yes (indicate revisions needed): 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? _No „ Yes (indicate for t s affected v 

m _ 


RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic records issues. 
The system may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration is necessary. RMD can provide advice on this 

as wel l as on compliance with requirements for Electronic Recordkeeping Certification and any necessary updates, _ 

Other: 




Elizabeth Withnell, Unit Chief 
Privacy and Civil Liberties Unit 


Signature: 

Date Signed: _ Z' _ 


JamesXXawdotf, Deputy General Counsel 
FilTprivacy and Civil Liberties Officer 


1V4 Rt U \\M* N v UO\ t KVt MANKIM/V M M'EEOERt UE' 
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I INSERT CLASSIFICATION/CONTROL MARKINGS, 

IF APPROPRIATE] 

L INFORMATION ABOUT THE SYSTEM / PROJECT 

■J. Provide a general description of the system or project that includes: (a) name of 
the system/project, including associated acronyms; (b) structure of the 
system/project, including interconnections with other projects or systems; (c) 
purpose of the system/project; (d) nature of the information in the system/project 
and how it will be used; (e) who will have access to the information in the 
system/project; (f) and the manner of transmission to all users. 

(a) License Plate Reader (LPR) 

(b) The LPR system is a centralized system, created by the Operational 
Technology Division, that uses digital pictures, near infrared (IR) illumination, and 
computer algorithms to capture reflected characters and store them. The system consists 


] 5-feteii, jl 

i -y 


The LPR system is not connected to any other data collection system, hut the 
license plate information can be checked against the National Crime Information Center 
by a particular agent or analyst in an appropriate investigation. RIGHT? . 

(c) Information collected by the LPR may be used in connection with an active 
predicated investigation, positive foreign intelligence collection, or assistance to other 
agencies when use is not otherwise prohibited by law or policy. The license plate 
information is not intended to be used to identify the occupants of a vehicle except in 
connection with an actual or potential investigation. 

(d) As noted above, the data collected is used to support FBI criminal and 
national security investigations. The data that is collected consists of: (1) license plate 
number; (21 partial image of the vehicle rear or front; (3) location of the LPR system; and 
(d) date and time of the collection. Users can retrieve data for appropriate law 
enforcement purposes. Users are warned to be particularly careful about collections of 
data from areas where activities may be protected by the First Amendment. 

(e) Users are FBI agents and analysts who are trained on the system and have an 
operational need for access. Levels of access are controlled by roles, consisting of 
system administrators, field office administrators, and analysts. AH users must have a 
password for access and their log-in attempts are monitored and audited, in addition, 

f I *>7E 


[INSERT CLASSIFICA'I'ION/CONTROL MARKINGS, 
IP APPROPRIATE! 
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iINSERT CLASSIFICATION/CONTROL MARKINGS, 
IF APPROPRIATE] 


b7E 


2. Does the system/project collect, maintain, or disseminate any information about 
individuals (ie., a human being or natural person, regardless of nationality)? 

_ NO [If no, STOP- file FT A is now complete and after division approval^} 

should be submitted to FBI OGC/PCLU for final FBI approval. Unless you are 
otherwise advised, no PI A is required.] 

X_YES f If yes, please continue.] 

3. Please indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identify or be 
linkable to an individual. 

(Check all that apply.) 

_ The information directly identifies specific individuals. 

_X The information is intended to be used, in conjunction with other data 

elements, to indirectly identify specific individuals. 

X_ The information can be used to distinguish or trace an individual’s identity 

(i.e., it is linked or linkable to specific individuals). 

If you marked any of the above, proceed to Question 4. 

__ None of the above. If none of the above, describe why the information does not 

identify specific individuals either directly or indirectly. ]If you checked this item, 
STOP here after providing the requested description,] 

4. Does the system/project pertain only to government employees, contractors, or 
consultants? 

__X_NO __ YES 


5. Is information about United States citizens or lawfully admitted permanent resident ] Vi i\\ 
aliens retrieved from the system/project by name or other personal identifier? j ^ '> 

■'j NO. [If no, skip to question 7.] Fm not sure how I want to answer 
this question. 


| INSERT CLASSIFICATION/CONTROL MARKINGS, 
IF APPROPRIATE! 

epic.org 14-06-04-FBI-FOIA-20150318-4th-Production 


EPIC-646 











| INSERT CLASSIFICATION/CONTROL MARKINGS, 

IF APPROPRIATE] 

___ YES. |If yes, proceed to the next question.] 

6. Does the system/project collect any information directly from the person who is the 
subject of the information? Maybe 

_NO ]If no, proceed to question 7.) 

... YES 

a. Does the system/project support criminal, CT, or FCI investigations or 
assessments? 

.._ NO 

___X_YES (If yes, proceed to question 7.J 

b. Are subjects of information, from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

_NO [The program will need to work with PCLU to develop/implement 

the necessary form(s).] 

__ YES Identify any forms, paper or electronic, used to request such 
information from the information subject: 

7. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system/project? Full SSNs should only be used as identifiers in limited instances. 

s/ NO ._ YES If yes, check all that apply: 


_ SSNs are necessar y to establish/confirm the identity of subjects, victims, 
witnesses or sources in this law enforcement or intelligence activity. 


SSNs are necessary to identify FBI personnel in this internal administrative 

system. 

___ SSNs are important for other reasons. Describe: 

The system/project provides special protection to SSNs (e.g., SSNs are 
encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: 
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[INSERT CLASSIFICATION/CONTROL MARKINGS, 
IF APPROPRIATE} 


___ It is not feasible for the system/project to provide special protection to 
SSNs. Explain: 

8. Is the system operated by a contractor? 

X No. 

_Yes, Information systems operated by contractors for the FBI may be 

considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates PII and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system for the FBI. 

9. Has the system undergone Certification & Accreditation (C&A) by the FBI | *' V 

Security Division (SeeD)? j || 

NO If no, indicate reason; if C&A is pending, provide anticipated 
completion date: 

„ _3G3L_ YES If yes, please indicate the following, if known: 

Provide date of last C&A certification/re-certification: 

Con fiden tiali ty:_Low_Mod er ate __High ^Undefined 

Integrity: _Low Moderate High Undefined 

Availability: _.Low Moderate High Undefined 

_ Not applicable - this system is only paper-based. 
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10 Does the system conduct data mining as defined in Section 804 of the 

implementing Recommendations of the 9/11 Commission Act of 2007, P.L. 110- 
53 (codified at 42 USC 2000ee-3)? 

_X?_ NO 

___ YES If yes, please describe the data mining function: 

11. Is this a national security system (as determined by the SecD)? j } 

_X_NO YES | 

12. Status of System/ Project: 

X _This is a new system/ project in development. [If you checked this block, 
STOP” The PTA is now complete and after division approval(s) should be 
submitted to FBI OGC/PCLU for final FBI approval and determination if 
PI A and/or other actions are required.] 

II. EXISTING SYSTEMS / PROJECTS 

1. When was the system/project developed? 

2. Has the system/project undergone any significant changes since April 17,2003? 

__ NO [If no, proceed to next question (IIJ).] 


YES If yes, indicate which of the following changes were involved (mark all 
changes that apply, and provide brief explanation for each marked change): 

__ A conversion from paper-based records to an electronic system. 

__ A change from information in a format that is anonymous or non- 
identifiable to a format that is identifiable to particular individuals. 

__ A new use of an IT system/project, including application of a new 
technology, that changes how information in identifiable form is managed. 

(For example, a change that would create a more open environment and/or 
avenue for exposure of data that previously did not exist.) 

A change that results in information in identifiable form being 
merged, centralized, or matched with other databases, 

|INSERT CLASSIFICATION/CONTROL MARKINGS, 

IF APPROPRIATE] FDTr f -, Q 
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I insert classification/control markings, 

W APPROPRIATE] 

A new method of authenticating the use of and access to 
information in identifiable form by members of the public. 

A systematic incorporation of databases of information in 
identifiable form purchased or obtained from commercial or public sources. 

__ A new interagency use or shared agency function that results in 
newuses or exchanges of information in identifiable form. 

_ A change that results in a new use or disclosure of information in 
identifiable form, 

A change that results in new items of information in identifiahle 
form being added into the system/project. 

Changes do not involve a change in the type of records maintained, 
the individuals on whom records are maintained, or the use or 
dissemination of information from the system/project. 

__ Other | Provide brief explanation]: 

3, Does a PIA for this system/project already exist? 

_NO_YES 

If yes: 

a. Provide date/title of the PIA: 

b. Has the system/project undergone any significant changes since the PIA? 

_NO_YES 

[The PTA is now complete and after division approval(s) should be submitted to 
FBI OGC/PCLU for final FBI approval and determination if PIA and/or other 
actions are required.] 
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(OGC/PCLU (Rev. 06/08/2010) 

FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

(Equivalent to the DOJ Initial Privacy Assessment (IPA)) 

NAME OF SYSTEM / PROJECT: | | 

BIKR FBI Unique Asset ID: SYS-0000181 _ 


Derived From: 

SYSTEM/PROJECT POC 

FBI OGC/PCLU POC 

Classified By: 

Name: | | 

Name: 

Reason: 

Program Office: LASR/LSS 

Phone: 

Declassify On: 

Division: DI 

Room Number: 


Phone :l ! 



Room Number: WB-601 



FBI DIVISION INTERMEDIATE APPROVALS 



Program Manager (or other appropriate 
executive as Division determines) 

Division Privacy Officer 

Program Division: DI 

Signature: 

Signature: 


Date signed: 

Date signed: 


Name:| | 

Name] ] 


Title: Program Manager 

Title: Supv Mgmt & Program Analyst 

FBIHQ Division: DI 

Signature: 

Signature: 


Date signed: 

Date signed: 


Name: Margaret Gulotta 

Name:! ! 


Title: Section Chief 

Title: Supv Mgmt & Program Analyst 


After all division approvals, forward signed hard copy plus electronic copy to FBI OGC/PCLU (JEH 7338), 

(The FBI Pri vacy and Civil Liberties Officer's determinations, conditions, and/or final approval will he recorded on the 
following page.) 

Upon final FBI approval, FBI OGC/PCLU will distribute as follows: 

1 - Signed original to file 190-HQ-C1321794 (fwd to JEH 1B204 via PA-520) 

Copies (recipients please print/reproduce as needed for Program/Division file(s)): 

1 - DOJ Office of Privacy and Civil Liberties (via e-mail to 1 - OGC\PCLU intranet 

privacy@usdoj .gov) 1 - PCLU UC 

(if classified, via hand delivery to 1331 Penn. Ave. NW, Suite 940, 1 - PCLU Library 

20530) 1 - PCLU Tickler 

2 - FBI OCIO / OIPP (JEH 9376, attn I I b6 

1 - FBI SecD/AU (elec, copy: via e-mail to UC I I b7< 

1 - RMD/RMAU (attn: | | 

2 - Program Division POC /Privacy Officer 
2 - FBIHQ Division POC /Privacy Officer 
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^N£t^ssig|Ep 

FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: [This section will be completed by the FBI 
PCLU/PCLO following PTA submission. The PTA drafter should skip to the next page arid continue.] _ 

_PIA is required by the E-Govemment Act. 

_PIA is to be completed as a matter of FBI/DOJ discretion. 

Is PIA to be published on FBI.GOV (after any RMD FOIA redactions)? _Yes. _No (indicate reason): 


X_PIA is not required for the following reason(s): 

_System does not collect, maintain, or disseminate PII. 

_System is grandfathered (in existence before 4/17/2003; no later changes posing significant privacy risks). 

_Information in the system relates to internal government operations. 

_System has been previously assessed under an evaluation similar to a PIA. 

_X_No significant privacy issues (or privacy issues are unchanged). 

_Other (describe): 


Applicable SORN(s): DOJ Computer Systems Activity & Access Records, 64 Fed. Reg. 73,585 (Dec. 30, 1999), as 
amended by 66 Fed. Reg. 8525 (Jan. 31,2001) and 72 Fed. Reg. 3410 (Jan. 25, 2007). 

Notify FBI RMD/RIDS per MIOG 190.2.3? x No _Yes—See sample EC on PCLU intranet website here: 

http://home/DO/OGC/LTB/PCLU/PrivacyCivil%20Liberties%20Library/form_for_miogl90-2-3_ec.wpd 

SORN/SORN revision(s) required? _x_No _Yes (indicate revisions needed): 


Prepare/revise/add Privacy Act (e)(3) statements for related forms? _x_No _Yes (indicate forms affected): 


RECORDS. The program should consult with RMD to identify/resolve any Federal records/electronic records issues. 
The system may contain Federal records whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration is necessary. RMD can provide advice on this 
as well as on compliance with requirements for Electronic Recordkeeping Certification and any necessary updates. 
Other: 


David C. Larson, Deputy General Counsel Signature: /s/ 1 | Acting FBI Privacy Officer 

FBI Privacy and Civil Liberties Officer _ Date Signed: 1/10/2011 _ 
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I. INFORMATION ABOUT THE SYSTEM / PROJECT 

1. Provide a general description of the system or project that includes: (a) name of 
the system/project, including associated acronyms; (b) structure of the 
system/project, including interconnections with other projects or systems; (c) 
purpose of the system/project; (d) nature of the information in the system/project 
and how it will be used; (e) who will have access to the information in the 
system/project; (f) and the manner of transmission to all users. 


b7E 


2. Does the system/project collect, maintain, or disseminate any information about 
individuals (i.e., a human being or natural person)? 

_NO [If no, STOP. The PTA is now complete and after division approvals) 

should be submitted to FBI OGC/PCLU for final FBI approval. Unless you are 
otherwise advised, no PIA is required.] 

_X_ YES [If yes, please continue.) The information about individuals is about the 
users of the system whose log-in is collected and subject to audit. 

3. Please indicate if any of the following characteristics apply to the information in the 
system about individuals: Bear in mind that log-on information may identify or be 
linkable to an individual. 

(Check all that apply.) 

_X_ The information directly identifies specific individuals. The information about 
individuals is log-in and audit data. 

_ The information is intended to be used, in conjunction with other data elements, 

to indirectly identify specific individuals. 

_The information can be used to distinguish or trace an individual’s identity (i.e., it 

is linked or linkable to specific individuals). 
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If you marked any of the above, proceed to Question 3. 

_ None of the above. If none of the above, describe why the information does not 

identify specific individuals either directly or indirectly. (If you checked this item, 
STOP here after providing the requested description.] 

4. Does the system/project pertain only to government employees, contractors, or 
consultants? 


NO X YES 


5. Is information about United States citizens or lawfully admitted permanent resident 
aliens retrieved from the system/project by name or other personal identifier? 

_NO. [If no, skip to question 7.] 

X YES. [If yes, proceed to the next question.] 

6. Does the system/project collect any information directly from the person who is the 
subject of the information? 

_NO [If no, proceed to question 7.] 

_X_YES 


a. Does the system/project support criminal, CT, or FCI investigations or 
assessments? 


_NO 

X_YES [If yes, proceed to question 7.] 


b. Are subjects of information from whom the information is directly collected 
provided a written Privacy Act (e)(3) statement (either on the collection form or via a 
separate notice)? 

_NO [The program will need to work with PCLU to develop/implement 

the necessary form(s).] 

_YES Identify any forms, paper or electronic, used to request such 

information from the information subject: 
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7. Are Social Security Numbers (SSNs) collected, maintained or disseminated from the 
system/project? Full SSNs should only be used as identifiers in limited instances. 

X NO _YES If yes, check all that apply: 

_SSNs are necessary to establish/confirm the identity of subjects, victims, 

witnesses or sources in this law enforcement or intelligence activity. 

_SSNs are necessary to identify FBI personnel in this internal administrative 

system. 


_SSNs are important for other reasons. Describe: 

_The system/project provides special protection to SSNs (e.g., SSNs are 

encrypted, hidden from all users via a look-up table, or only available to certain 
users). Describe: 

_It is not feasible for the system/project to provide special protection to 

SSNs. Explain: 

8. Is the system operated by a contractor? 

_No. 

_X_Yes. Information systems operated by contractors for the FBI may be 
considered Privacy Act systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must be included in the event the system 
collects, maintains or disseminates PII and additional requirements may be 
imposed as a matter of Department of Justice policy. Consultations with the 
Office of the General Counsel may be required if a contractor is operating the 
system for the FBI. 

9. Has the system undergone Certification & Accreditation (C&A) by the FBI 
Security Division (SecD)? 

_NO If no, indicate reason; if C&A is pending, provide anticipated 

completion date: 

X YES If yes, please indicate the following, if known: 

Provide date of last C&A certification/re-certification: 
lOMaylO 

Confidentiality:_Low_Moderate X High_Undefined 

Integrity: _Low XModerate High Undefined 

Availability: _Low X Moderate High Undefined 
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